CVE-2005-2885

The Downloads page in MAXdev MD-Pro 1.0.73, and possibly earlier versions, uses an incomplete blacklist to check for dangerous file extensions, which could…

published September 14, 2005

CVSS
—
EPSS
9%
Percentile
95.1
In the wild
Unconfirmed
What it is

The Downloads page in MAXdev MD-Pro 1.0.73, and possibly earlier versions, uses an incomplete blacklist to check for dangerous file extensions, which could allow remote attackers to bypass file extension checks and execute arbitrary commands by uploading a file with a different extension, as demonstrated using .inc files.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.08707 · 95.1th percentile
Published
2005-09-14T04:00Z
EPSS history
Timeline
  • 14 SEP 04:00Z
    The Downloads page in MAXdev MD-Pro 1.0.73, and possibly earlier versions, uses an incomplete blacklist to check for dangerous file extensions, which could…
    cvelistv5